web-reconnaissance

All In One Web Recon

Omnisci3nt is an open-source web reconnaissance and intelligence tool for extracting deep technical insights from domains, including subdomains, SSL certificates, exposed services, archived content, and configuration data. — Omnisci3nt gives you the full picture in seconds.

A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.

Yet another web recon tool

Advanced Web Directory & File Bruteforcer with Updated Wordlists (May 2026)

A Simple Tool to gather information from any website, domain, sub-domain, DNS, links by enumeration with simple commands.

RAVERSE: AI Multi-Agent Binary Patching System with MCP Server (35 tools, npm/pip/docker)

Well-labeled files & regexes to search for when performing reconnaissance against websites.

DirBatch é uma ferramenta educacional em Batch para Windows que simula a enumeração de diretórios via requisições HTTP usando wordlists.

All in One Advanced and Detailed Web Scanner with over 1000 plug-ins.

PentestHorizon is a sophisticated Telegram bot designed for cybersecurity professionals, offering automated web reconnaissance, enumeration, scanning, and vulnerability assessment tools through an easy-to-use Telegram interface.

Website endpoint recon tool and rate limit tester that can bypass simple captchas and WAFs.

Automated web reconnaissance platform

An educational recon and OSINT tool suite

ReconX is a Linux-based, terminal-driven reconnaissance and vulnerability assessment framework for penetration testing and bug bounty hunting. It automates the full reconnaissance lifecycle.

Full-scope recon case study on Audible’s HackerOne program using whois, amass, and httpx. Over 1,000 subdomains discovered and documented in a legally scoped workflow.

DirRaptor is a high-speed Python-based directory and file brute-forcing tool for web applications. It discovers hidden paths on websites using wordlists, with support for multithreading, status code filtering, and real-time output — ideal for bug bounty hunting and ethical hacking.

Wappalyzer Python library to detect website technologies — identify CMS, WordPress, Shopify, JavaScript frameworks like React & Next.js, analytics, payment processors, web servers, CDNs & 1,400+ tech stack fingerprints with versions. Free, open source website technology detector for Python 3.